
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@rabbitholegg/questdk-plugin-foundation
Advanced tools
Foundation is a decentralized platform that leverages blockchain technology to empower artists and creators by enabling them to mint, auction, and trade unique digital art pieces as non-fungible tokens (NFTs).
Foundation is available on BASE and Ethereum networks.
All mints are routed throught the NFTDropMarket contract. There is two main functions that we are interested in, mintFromFixedPriceSaleV2 and mintFromDutchAuctionV2. Fixed Price sales will account for about ~95% of all foundation mints.
In the getFees function, we try to get the fees using the method getFixedPriceSaleV2 on the drop market contract first, then we try getDutchAuctionV2. If it fails, we return the fallback fee structure. A valid Dutch Auction will return a zero address when calling getFixedPriceSaleV2, so we can use this as a flag to try getDutchAuctionV2.
FAQs
Plugin for Foundation
The npm package @rabbitholegg/questdk-plugin-foundation receives a total of 3 weekly downloads. As such, @rabbitholegg/questdk-plugin-foundation popularity was classified as not popular.
We found that @rabbitholegg/questdk-plugin-foundation demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.